Skip to content
OpenAdvisories

Package · Go

github.com/bitnami-labs/sealed-secrets

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-22728

    sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations

    Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow. The rotation handler derives the sealing scope for the newly encrypted output from untrusted spec.template.metadata.annotations present in the input …

    Bitnami sealed-secrets github.com/bitnami-labs/sealed-secrets Go